EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...

More documents

Recommendations

Info

CCS Certification Report Blue Coat Systems, Inc. ProxySG 6.1 ProxySG 6.1 also implements two information flow control policies, the Proxy SFP and the WAN Optimization SFP. Both policies enforce rules for the transit traffic, in terms of what traffic can pass through the TOE, and the actions that need to take place on the traffic as it passes through the TOE. Details of these security policies can be found in Section 1.4.2.3 of the ST. In addition, ProxySG 6.1 implements policies pertaining to security audit, cryptographic support, identification and authentication, security management, protection of TOE security functionality, resource utilization and TOE access. Further details on these security policies may be found in Section 6 of the ST. 7 Assumptions and Clarification of Scope Consumers of ProxySG 6.1 should consider assumptions about usage, policies in place and environmental settings as requirements for the product’s installation and its operating environment. This will ensure the proper and secure operation of the TOE. 7.1 Secure Usage Assumptions The following Secure Usage Assumptions are listed in the ST: • Administrators are non-hostile and follow all administrator guidance when using the TOE. Administration is competent and on-going; • The TOE has been installed and configured according to the appropriate installation guides; and • Passwords for administrative access to the TOE and for End User accounts are at least five characters in length, and are not dictionary words. 7.2 Environmental Assumptions The following Environmental Assumptions are listed in the ST: • The TOE is located in an environment that provides physical security, uninterruptible power, air conditioning, and all other conditions required for reliable operation of the hardware. Physical access to the appliance is restricted to authorized persons; and • All Proxy SFP-controlled protocol traffic between the Internal and External Networks traverses the ProxySG device; there is no other connection between the Internal and External Networks for Proxy SFP-controlled protocol traffic. ___________________________________________________________________________ Version 1.0 6 March 2012 - Page 4 of 11 -
CCS Certification Report Blue Coat Systems, Inc. ProxySG 6.1 7.3 Clarification of Scope ProxySG 6.1 offers protection against inadvertent or casual attempts to breach system security by unsophisticated attackers possessing enhanced-basic attack potential. ProxySG 6.1 is not intended for situations which involve determined attempts by hostile or wellfunded attackers using sophisticated attack techniques. 8 Evaluated Configuration The evaluated configuration for ProxySG 6.1 comprises the software SGOS v6.1 running on one of the following appliances: • ProxySG 510/810-5 • ProxySG 510/810-10, 510/810-20, 510/810-25 with a Cavium CN1010 PCI- Extended (PCI-X) card, or a BCM5825 PCI-Extended (PCI-X) card • ProxySG 600-10, 600-20, 600-35 with a Cavium CN501 Security Macro Processor • ProxySG 900-10, 900-20, 900-30, 900-45 with a Cavium CN1610 Security Macro Processor • ProxySG 9000-10, 9000-20 with a Cavium CN1620 PCI-Express (PCI-e) card For all the above appliance models, the appliance type can be either Mach5 edition (for example, ProxySG 510-5-M5) for WAN optimization, or Proxy edition (for example, ProxySG 510-5-PR) for Proxy and WAN optimization features. No additional hardware or environmental components are required for the TOE to function in the evaluated configuration. The publication entitled Blue Coat Systems, Inc. ProxySG SG510, SG600, SG810, SG900, and SG9000 running SGOS v6.1 Guidance Supplement v0.5 describes the procedures necessary to install and operate ProxySG 6.1 in its evaluated configuration. 9 Documentation The Blue Coat Systems, Inc documents provided to the consumer are as follows: a. Blue Coat Systems, Inc. ProxySG SG510, SG600, SG810, SG900, and SG9000 running SGOS v6.1 Guidance Supplement v0.5; b. Blue Coat Systems SGOS Administration Guide, Version SGOS 6.1.x, 231-03113, SGOS 6.1.1-08/2011; ___________________________________________________________________________ Version 1.0 6 March 2012 - Page 5 of 11 -
Page 1 and 2: Certification Report EAL 4+ Evaluat
Page 3 and 4: CCS Certification Report Blue Coat
Page 7: CCS Certification Report Blue Coat
Page 15: CCS Certification Report Blue Coat

EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...

Create successful ePaper yourself

Delete template?

Save as template?